]> git.ipfire.org Git - thirdparty/openssl.git/blame - test/smime-certs/mksmime-certs.sh
Update copyright year
[thirdparty/openssl.git] / test / smime-certs / mksmime-certs.sh
CommitLineData
a0957d55 1#!/bin/sh
4333b89f 2# Copyright 2013-2021 The OpenSSL Project Authors. All Rights Reserved.
44c8a5e2 3#
909f1a2e 4# Licensed under the Apache License 2.0 (the "License"). You may not use
44c8a5e2
RS
5# this file except in compliance with the License. You can obtain a copy
6# in the file LICENSE in the source distribution or at
7# https://www.openssl.org/source/license.html
8
a0957d55
DSH
9
10# Utility to recreate S/MIME certificates
11
12OPENSSL=../../apps/openssl
13OPENSSL_CONF=./ca.cnf
14export OPENSSL_CONF
15
16# Root CA: create certificate directly
ef898017 17CN="Test S/MIME RSA Root" $OPENSSL req -config ca.cnf -x509 -noenc \
a0957d55
DSH
18 -keyout smroot.pem -out smroot.pem -newkey rsa:2048 -days 3650
19
20# EE RSA certificates: create request first
ef898017 21CN="Test S/MIME EE RSA #1" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
22 -keyout smrsa1.pem -out req.pem -newkey rsa:2048
23# Sign request: end entity extensions
24$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
25 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smrsa1.pem
26
ef898017 27CN="Test S/MIME EE RSA #2" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
28 -keyout smrsa2.pem -out req.pem -newkey rsa:2048
29$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
30 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smrsa2.pem
31
ef898017 32CN="Test S/MIME EE RSA #3" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
33 -keyout smrsa3.pem -out req.pem -newkey rsa:2048
34$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
35 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smrsa3.pem
36
37# Create DSA parameters
38
39$OPENSSL dsaparam -out dsap.pem 2048
40
ef898017 41CN="Test S/MIME EE DSA #1" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
42 -keyout smdsa1.pem -out req.pem -newkey dsa:dsap.pem
43$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
44 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdsa1.pem
ef898017 45CN="Test S/MIME EE DSA #2" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
46 -keyout smdsa2.pem -out req.pem -newkey dsa:dsap.pem
47$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
48 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdsa2.pem
ef898017 49CN="Test S/MIME EE DSA #3" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
50 -keyout smdsa3.pem -out req.pem -newkey dsa:dsap.pem
51$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
52 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdsa3.pem
53
54# Create EC parameters
55
56$OPENSSL ecparam -out ecp.pem -name P-256
57$OPENSSL ecparam -out ecp2.pem -name K-283
58
ef898017 59CN="Test S/MIME EE EC #1" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
60 -keyout smec1.pem -out req.pem -newkey ec:ecp.pem
61$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
62 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smec1.pem
ef898017 63CN="Test S/MIME EE EC #2" $OPENSSL req -config ca.cnf -noenc \
a0957d55
DSH
64 -keyout smec2.pem -out req.pem -newkey ec:ecp2.pem
65$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
66 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smec2.pem
ef898017 67CN="Test S/MIME EE EC #3" $OPENSSL req -config ca.cnf -noenc \
1aee92bf
DSH
68 -keyout smec3.pem -out req.pem -newkey ec:ecp.pem
69$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
70 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smec3.pem
75787fd8 71# Create X9.42 DH parameters.
24d5be7a 72$OPENSSL genpkey -genparam -algorithm DHX -out dhp.pem
75787fd8
DSH
73# Generate X9.42 DH key.
74$OPENSSL genpkey -paramfile dhp.pem -out smdh.pem
75$OPENSSL pkey -pubout -in smdh.pem -out dhpub.pem
76# Generate dummy request.
ef898017 77CN="Test S/MIME EE DH #1" $OPENSSL req -config ca.cnf -noenc \
75787fd8
DSH
78 -keyout smtmp.pem -out req.pem -newkey rsa:2048
79# Sign request but force public key to DH
80$OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \
81 -force_pubkey dhpub.pem \
82 -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdh.pem
a0957d55 83# Remove temp files.
75787fd8 84rm -f req.pem ecp.pem ecp2.pem dsap.pem dhp.pem dhpub.pem smtmp.pem smroot.srl